HIGH 7.2 NVD
CVE-2026-102132
An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credentia
An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to create the privileged integration credential being imported. A delegated administrator holding a single narrowly scoped administrative permission could therefore obtain full system administrator privileges, without any action by an existing system administrator.
References
- https://github.com/kiteworks/security-advisories/security/advisories/GHSA-qx8c-x3hv-c25g
- https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-
This high severity vulnerability with a CVSS score of 7.2 was published on 2026-09-30 via NVD.
vulnfeed aggregates 9519 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.